Loading...
1/*
2 * Copyright (c) 2007 Patrick McHardy <kaber@trash.net>
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License as
6 * published by the Free Software Foundation; either version 2 of
7 * the License, or (at your option) any later version.
8 *
9 * The code this is based on carried the following copyright notice:
10 * ---
11 * (C) Copyright 2001-2006
12 * Alex Zeffertt, Cambridge Broadband Ltd, ajz@cambridgebroadband.com
13 * Re-worked by Ben Greear <greearb@candelatech.com>
14 * ---
15 */
16#include <linux/kernel.h>
17#include <linux/types.h>
18#include <linux/module.h>
19#include <linux/init.h>
20#include <linux/errno.h>
21#include <linux/slab.h>
22#include <linux/string.h>
23#include <linux/rculist.h>
24#include <linux/notifier.h>
25#include <linux/netdevice.h>
26#include <linux/etherdevice.h>
27#include <linux/ethtool.h>
28#include <linux/if_arp.h>
29#include <linux/if_link.h>
30#include <linux/if_macvlan.h>
31#include <net/rtnetlink.h>
32#include <net/xfrm.h>
33
34#define MACVLAN_HASH_SIZE (1 << BITS_PER_BYTE)
35
36struct macvlan_port {
37 struct net_device *dev;
38 struct hlist_head vlan_hash[MACVLAN_HASH_SIZE];
39 struct list_head vlans;
40 struct rcu_head rcu;
41 bool passthru;
42 int count;
43};
44
45static void macvlan_port_destroy(struct net_device *dev);
46
47#define macvlan_port_get_rcu(dev) \
48 ((struct macvlan_port *) rcu_dereference(dev->rx_handler_data))
49#define macvlan_port_get(dev) ((struct macvlan_port *) dev->rx_handler_data)
50#define macvlan_port_exists(dev) (dev->priv_flags & IFF_MACVLAN_PORT)
51
52static struct macvlan_dev *macvlan_hash_lookup(const struct macvlan_port *port,
53 const unsigned char *addr)
54{
55 struct macvlan_dev *vlan;
56 struct hlist_node *n;
57
58 hlist_for_each_entry_rcu(vlan, n, &port->vlan_hash[addr[5]], hlist) {
59 if (!compare_ether_addr_64bits(vlan->dev->dev_addr, addr))
60 return vlan;
61 }
62 return NULL;
63}
64
65static void macvlan_hash_add(struct macvlan_dev *vlan)
66{
67 struct macvlan_port *port = vlan->port;
68 const unsigned char *addr = vlan->dev->dev_addr;
69
70 hlist_add_head_rcu(&vlan->hlist, &port->vlan_hash[addr[5]]);
71}
72
73static void macvlan_hash_del(struct macvlan_dev *vlan, bool sync)
74{
75 hlist_del_rcu(&vlan->hlist);
76 if (sync)
77 synchronize_rcu();
78}
79
80static void macvlan_hash_change_addr(struct macvlan_dev *vlan,
81 const unsigned char *addr)
82{
83 macvlan_hash_del(vlan, true);
84 /* Now that we are unhashed it is safe to change the device
85 * address without confusing packet delivery.
86 */
87 memcpy(vlan->dev->dev_addr, addr, ETH_ALEN);
88 macvlan_hash_add(vlan);
89}
90
91static int macvlan_addr_busy(const struct macvlan_port *port,
92 const unsigned char *addr)
93{
94 /* Test to see if the specified multicast address is
95 * currently in use by the underlying device or
96 * another macvlan.
97 */
98 if (!compare_ether_addr_64bits(port->dev->dev_addr, addr))
99 return 1;
100
101 if (macvlan_hash_lookup(port, addr))
102 return 1;
103
104 return 0;
105}
106
107
108static int macvlan_broadcast_one(struct sk_buff *skb,
109 const struct macvlan_dev *vlan,
110 const struct ethhdr *eth, bool local)
111{
112 struct net_device *dev = vlan->dev;
113 if (!skb)
114 return NET_RX_DROP;
115
116 if (local)
117 return vlan->forward(dev, skb);
118
119 skb->dev = dev;
120 if (!compare_ether_addr_64bits(eth->h_dest,
121 dev->broadcast))
122 skb->pkt_type = PACKET_BROADCAST;
123 else
124 skb->pkt_type = PACKET_MULTICAST;
125
126 return vlan->receive(skb);
127}
128
129static void macvlan_broadcast(struct sk_buff *skb,
130 const struct macvlan_port *port,
131 struct net_device *src,
132 enum macvlan_mode mode)
133{
134 const struct ethhdr *eth = eth_hdr(skb);
135 const struct macvlan_dev *vlan;
136 struct hlist_node *n;
137 struct sk_buff *nskb;
138 unsigned int i;
139 int err;
140
141 if (skb->protocol == htons(ETH_P_PAUSE))
142 return;
143
144 for (i = 0; i < MACVLAN_HASH_SIZE; i++) {
145 hlist_for_each_entry_rcu(vlan, n, &port->vlan_hash[i], hlist) {
146 if (vlan->dev == src || !(vlan->mode & mode))
147 continue;
148
149 nskb = skb_clone(skb, GFP_ATOMIC);
150 err = macvlan_broadcast_one(nskb, vlan, eth,
151 mode == MACVLAN_MODE_BRIDGE);
152 macvlan_count_rx(vlan, skb->len + ETH_HLEN,
153 err == NET_RX_SUCCESS, 1);
154 }
155 }
156}
157
158/* called under rcu_read_lock() from netif_receive_skb */
159static rx_handler_result_t macvlan_handle_frame(struct sk_buff **pskb)
160{
161 struct macvlan_port *port;
162 struct sk_buff *skb = *pskb;
163 const struct ethhdr *eth = eth_hdr(skb);
164 const struct macvlan_dev *vlan;
165 const struct macvlan_dev *src;
166 struct net_device *dev;
167 unsigned int len = 0;
168 int ret = NET_RX_DROP;
169
170 port = macvlan_port_get_rcu(skb->dev);
171 if (is_multicast_ether_addr(eth->h_dest)) {
172 src = macvlan_hash_lookup(port, eth->h_source);
173 if (!src)
174 /* frame comes from an external address */
175 macvlan_broadcast(skb, port, NULL,
176 MACVLAN_MODE_PRIVATE |
177 MACVLAN_MODE_VEPA |
178 MACVLAN_MODE_PASSTHRU|
179 MACVLAN_MODE_BRIDGE);
180 else if (src->mode == MACVLAN_MODE_VEPA)
181 /* flood to everyone except source */
182 macvlan_broadcast(skb, port, src->dev,
183 MACVLAN_MODE_VEPA |
184 MACVLAN_MODE_BRIDGE);
185 else if (src->mode == MACVLAN_MODE_BRIDGE)
186 /*
187 * flood only to VEPA ports, bridge ports
188 * already saw the frame on the way out.
189 */
190 macvlan_broadcast(skb, port, src->dev,
191 MACVLAN_MODE_VEPA);
192 return RX_HANDLER_PASS;
193 }
194
195 if (port->passthru)
196 vlan = list_first_entry(&port->vlans, struct macvlan_dev, list);
197 else
198 vlan = macvlan_hash_lookup(port, eth->h_dest);
199 if (vlan == NULL)
200 return RX_HANDLER_PASS;
201
202 dev = vlan->dev;
203 if (unlikely(!(dev->flags & IFF_UP))) {
204 kfree_skb(skb);
205 return RX_HANDLER_CONSUMED;
206 }
207 len = skb->len + ETH_HLEN;
208 skb = skb_share_check(skb, GFP_ATOMIC);
209 if (!skb)
210 goto out;
211
212 skb->dev = dev;
213 skb->pkt_type = PACKET_HOST;
214
215 ret = vlan->receive(skb);
216
217out:
218 macvlan_count_rx(vlan, len, ret == NET_RX_SUCCESS, 0);
219 return RX_HANDLER_CONSUMED;
220}
221
222static int macvlan_queue_xmit(struct sk_buff *skb, struct net_device *dev)
223{
224 const struct macvlan_dev *vlan = netdev_priv(dev);
225 const struct macvlan_port *port = vlan->port;
226 const struct macvlan_dev *dest;
227 __u8 ip_summed = skb->ip_summed;
228
229 if (vlan->mode == MACVLAN_MODE_BRIDGE) {
230 const struct ethhdr *eth = (void *)skb->data;
231 skb->ip_summed = CHECKSUM_UNNECESSARY;
232
233 /* send to other bridge ports directly */
234 if (is_multicast_ether_addr(eth->h_dest)) {
235 macvlan_broadcast(skb, port, dev, MACVLAN_MODE_BRIDGE);
236 goto xmit_world;
237 }
238
239 dest = macvlan_hash_lookup(port, eth->h_dest);
240 if (dest && dest->mode == MACVLAN_MODE_BRIDGE) {
241 /* send to lowerdev first for its network taps */
242 dev_forward_skb(vlan->lowerdev, skb);
243
244 return NET_XMIT_SUCCESS;
245 }
246 }
247
248xmit_world:
249 skb->ip_summed = ip_summed;
250 skb_set_dev(skb, vlan->lowerdev);
251 return dev_queue_xmit(skb);
252}
253
254netdev_tx_t macvlan_start_xmit(struct sk_buff *skb,
255 struct net_device *dev)
256{
257 unsigned int len = skb->len;
258 int ret;
259 const struct macvlan_dev *vlan = netdev_priv(dev);
260
261 ret = macvlan_queue_xmit(skb, dev);
262 if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN)) {
263 struct macvlan_pcpu_stats *pcpu_stats;
264
265 pcpu_stats = this_cpu_ptr(vlan->pcpu_stats);
266 u64_stats_update_begin(&pcpu_stats->syncp);
267 pcpu_stats->tx_packets++;
268 pcpu_stats->tx_bytes += len;
269 u64_stats_update_end(&pcpu_stats->syncp);
270 } else {
271 this_cpu_inc(vlan->pcpu_stats->tx_dropped);
272 }
273 return ret;
274}
275EXPORT_SYMBOL_GPL(macvlan_start_xmit);
276
277static int macvlan_hard_header(struct sk_buff *skb, struct net_device *dev,
278 unsigned short type, const void *daddr,
279 const void *saddr, unsigned len)
280{
281 const struct macvlan_dev *vlan = netdev_priv(dev);
282 struct net_device *lowerdev = vlan->lowerdev;
283
284 return dev_hard_header(skb, lowerdev, type, daddr,
285 saddr ? : dev->dev_addr, len);
286}
287
288static const struct header_ops macvlan_hard_header_ops = {
289 .create = macvlan_hard_header,
290 .rebuild = eth_rebuild_header,
291 .parse = eth_header_parse,
292 .cache = eth_header_cache,
293 .cache_update = eth_header_cache_update,
294};
295
296static int macvlan_open(struct net_device *dev)
297{
298 struct macvlan_dev *vlan = netdev_priv(dev);
299 struct net_device *lowerdev = vlan->lowerdev;
300 int err;
301
302 if (vlan->port->passthru) {
303 dev_set_promiscuity(lowerdev, 1);
304 goto hash_add;
305 }
306
307 err = -EBUSY;
308 if (macvlan_addr_busy(vlan->port, dev->dev_addr))
309 goto out;
310
311 err = dev_uc_add(lowerdev, dev->dev_addr);
312 if (err < 0)
313 goto out;
314 if (dev->flags & IFF_ALLMULTI) {
315 err = dev_set_allmulti(lowerdev, 1);
316 if (err < 0)
317 goto del_unicast;
318 }
319
320hash_add:
321 macvlan_hash_add(vlan);
322 return 0;
323
324del_unicast:
325 dev_uc_del(lowerdev, dev->dev_addr);
326out:
327 return err;
328}
329
330static int macvlan_stop(struct net_device *dev)
331{
332 struct macvlan_dev *vlan = netdev_priv(dev);
333 struct net_device *lowerdev = vlan->lowerdev;
334
335 if (vlan->port->passthru) {
336 dev_set_promiscuity(lowerdev, -1);
337 goto hash_del;
338 }
339
340 dev_mc_unsync(lowerdev, dev);
341 if (dev->flags & IFF_ALLMULTI)
342 dev_set_allmulti(lowerdev, -1);
343
344 dev_uc_del(lowerdev, dev->dev_addr);
345
346hash_del:
347 macvlan_hash_del(vlan, !dev->dismantle);
348 return 0;
349}
350
351static int macvlan_set_mac_address(struct net_device *dev, void *p)
352{
353 struct macvlan_dev *vlan = netdev_priv(dev);
354 struct net_device *lowerdev = vlan->lowerdev;
355 struct sockaddr *addr = p;
356 int err;
357
358 if (!is_valid_ether_addr(addr->sa_data))
359 return -EADDRNOTAVAIL;
360
361 if (!(dev->flags & IFF_UP)) {
362 /* Just copy in the new address */
363 memcpy(dev->dev_addr, addr->sa_data, ETH_ALEN);
364 } else {
365 /* Rehash and update the device filters */
366 if (macvlan_addr_busy(vlan->port, addr->sa_data))
367 return -EBUSY;
368
369 err = dev_uc_add(lowerdev, addr->sa_data);
370 if (err)
371 return err;
372
373 dev_uc_del(lowerdev, dev->dev_addr);
374
375 macvlan_hash_change_addr(vlan, addr->sa_data);
376 }
377 return 0;
378}
379
380static void macvlan_change_rx_flags(struct net_device *dev, int change)
381{
382 struct macvlan_dev *vlan = netdev_priv(dev);
383 struct net_device *lowerdev = vlan->lowerdev;
384
385 if (change & IFF_ALLMULTI)
386 dev_set_allmulti(lowerdev, dev->flags & IFF_ALLMULTI ? 1 : -1);
387}
388
389static void macvlan_set_multicast_list(struct net_device *dev)
390{
391 struct macvlan_dev *vlan = netdev_priv(dev);
392
393 dev_mc_sync(vlan->lowerdev, dev);
394}
395
396static int macvlan_change_mtu(struct net_device *dev, int new_mtu)
397{
398 struct macvlan_dev *vlan = netdev_priv(dev);
399
400 if (new_mtu < 68 || vlan->lowerdev->mtu < new_mtu)
401 return -EINVAL;
402 dev->mtu = new_mtu;
403 return 0;
404}
405
406/*
407 * macvlan network devices have devices nesting below it and are a special
408 * "super class" of normal network devices; split their locks off into a
409 * separate class since they always nest.
410 */
411static struct lock_class_key macvlan_netdev_xmit_lock_key;
412static struct lock_class_key macvlan_netdev_addr_lock_key;
413
414#define MACVLAN_FEATURES \
415 (NETIF_F_SG | NETIF_F_ALL_CSUM | NETIF_F_HIGHDMA | NETIF_F_FRAGLIST | \
416 NETIF_F_GSO | NETIF_F_TSO | NETIF_F_UFO | NETIF_F_GSO_ROBUST | \
417 NETIF_F_TSO_ECN | NETIF_F_TSO6 | NETIF_F_GRO | NETIF_F_RXCSUM | \
418 NETIF_F_HW_VLAN_FILTER)
419
420#define MACVLAN_STATE_MASK \
421 ((1<<__LINK_STATE_NOCARRIER) | (1<<__LINK_STATE_DORMANT))
422
423static void macvlan_set_lockdep_class_one(struct net_device *dev,
424 struct netdev_queue *txq,
425 void *_unused)
426{
427 lockdep_set_class(&txq->_xmit_lock,
428 &macvlan_netdev_xmit_lock_key);
429}
430
431static void macvlan_set_lockdep_class(struct net_device *dev)
432{
433 lockdep_set_class(&dev->addr_list_lock,
434 &macvlan_netdev_addr_lock_key);
435 netdev_for_each_tx_queue(dev, macvlan_set_lockdep_class_one, NULL);
436}
437
438static int macvlan_init(struct net_device *dev)
439{
440 struct macvlan_dev *vlan = netdev_priv(dev);
441 const struct net_device *lowerdev = vlan->lowerdev;
442
443 dev->state = (dev->state & ~MACVLAN_STATE_MASK) |
444 (lowerdev->state & MACVLAN_STATE_MASK);
445 dev->features = lowerdev->features & MACVLAN_FEATURES;
446 dev->features |= NETIF_F_LLTX;
447 dev->gso_max_size = lowerdev->gso_max_size;
448 dev->iflink = lowerdev->ifindex;
449 dev->hard_header_len = lowerdev->hard_header_len;
450
451 macvlan_set_lockdep_class(dev);
452
453 vlan->pcpu_stats = alloc_percpu(struct macvlan_pcpu_stats);
454 if (!vlan->pcpu_stats)
455 return -ENOMEM;
456
457 return 0;
458}
459
460static void macvlan_uninit(struct net_device *dev)
461{
462 struct macvlan_dev *vlan = netdev_priv(dev);
463 struct macvlan_port *port = vlan->port;
464
465 free_percpu(vlan->pcpu_stats);
466
467 port->count -= 1;
468 if (!port->count)
469 macvlan_port_destroy(port->dev);
470}
471
472static struct rtnl_link_stats64 *macvlan_dev_get_stats64(struct net_device *dev,
473 struct rtnl_link_stats64 *stats)
474{
475 struct macvlan_dev *vlan = netdev_priv(dev);
476
477 if (vlan->pcpu_stats) {
478 struct macvlan_pcpu_stats *p;
479 u64 rx_packets, rx_bytes, rx_multicast, tx_packets, tx_bytes;
480 u32 rx_errors = 0, tx_dropped = 0;
481 unsigned int start;
482 int i;
483
484 for_each_possible_cpu(i) {
485 p = per_cpu_ptr(vlan->pcpu_stats, i);
486 do {
487 start = u64_stats_fetch_begin_bh(&p->syncp);
488 rx_packets = p->rx_packets;
489 rx_bytes = p->rx_bytes;
490 rx_multicast = p->rx_multicast;
491 tx_packets = p->tx_packets;
492 tx_bytes = p->tx_bytes;
493 } while (u64_stats_fetch_retry_bh(&p->syncp, start));
494
495 stats->rx_packets += rx_packets;
496 stats->rx_bytes += rx_bytes;
497 stats->multicast += rx_multicast;
498 stats->tx_packets += tx_packets;
499 stats->tx_bytes += tx_bytes;
500 /* rx_errors & tx_dropped are u32, updated
501 * without syncp protection.
502 */
503 rx_errors += p->rx_errors;
504 tx_dropped += p->tx_dropped;
505 }
506 stats->rx_errors = rx_errors;
507 stats->rx_dropped = rx_errors;
508 stats->tx_dropped = tx_dropped;
509 }
510 return stats;
511}
512
513static void macvlan_vlan_rx_add_vid(struct net_device *dev,
514 unsigned short vid)
515{
516 struct macvlan_dev *vlan = netdev_priv(dev);
517 struct net_device *lowerdev = vlan->lowerdev;
518 const struct net_device_ops *ops = lowerdev->netdev_ops;
519
520 if (ops->ndo_vlan_rx_add_vid)
521 ops->ndo_vlan_rx_add_vid(lowerdev, vid);
522}
523
524static void macvlan_vlan_rx_kill_vid(struct net_device *dev,
525 unsigned short vid)
526{
527 struct macvlan_dev *vlan = netdev_priv(dev);
528 struct net_device *lowerdev = vlan->lowerdev;
529 const struct net_device_ops *ops = lowerdev->netdev_ops;
530
531 if (ops->ndo_vlan_rx_kill_vid)
532 ops->ndo_vlan_rx_kill_vid(lowerdev, vid);
533}
534
535static void macvlan_ethtool_get_drvinfo(struct net_device *dev,
536 struct ethtool_drvinfo *drvinfo)
537{
538 snprintf(drvinfo->driver, 32, "macvlan");
539 snprintf(drvinfo->version, 32, "0.1");
540}
541
542static int macvlan_ethtool_get_settings(struct net_device *dev,
543 struct ethtool_cmd *cmd)
544{
545 const struct macvlan_dev *vlan = netdev_priv(dev);
546 return dev_ethtool_get_settings(vlan->lowerdev, cmd);
547}
548
549static const struct ethtool_ops macvlan_ethtool_ops = {
550 .get_link = ethtool_op_get_link,
551 .get_settings = macvlan_ethtool_get_settings,
552 .get_drvinfo = macvlan_ethtool_get_drvinfo,
553};
554
555static const struct net_device_ops macvlan_netdev_ops = {
556 .ndo_init = macvlan_init,
557 .ndo_uninit = macvlan_uninit,
558 .ndo_open = macvlan_open,
559 .ndo_stop = macvlan_stop,
560 .ndo_start_xmit = macvlan_start_xmit,
561 .ndo_change_mtu = macvlan_change_mtu,
562 .ndo_change_rx_flags = macvlan_change_rx_flags,
563 .ndo_set_mac_address = macvlan_set_mac_address,
564 .ndo_set_multicast_list = macvlan_set_multicast_list,
565 .ndo_get_stats64 = macvlan_dev_get_stats64,
566 .ndo_validate_addr = eth_validate_addr,
567 .ndo_vlan_rx_add_vid = macvlan_vlan_rx_add_vid,
568 .ndo_vlan_rx_kill_vid = macvlan_vlan_rx_kill_vid,
569};
570
571void macvlan_common_setup(struct net_device *dev)
572{
573 ether_setup(dev);
574
575 dev->priv_flags &= ~(IFF_XMIT_DST_RELEASE | IFF_TX_SKB_SHARING);
576 dev->netdev_ops = &macvlan_netdev_ops;
577 dev->destructor = free_netdev;
578 dev->header_ops = &macvlan_hard_header_ops,
579 dev->ethtool_ops = &macvlan_ethtool_ops;
580}
581EXPORT_SYMBOL_GPL(macvlan_common_setup);
582
583static void macvlan_setup(struct net_device *dev)
584{
585 macvlan_common_setup(dev);
586 dev->tx_queue_len = 0;
587}
588
589static int macvlan_port_create(struct net_device *dev)
590{
591 struct macvlan_port *port;
592 unsigned int i;
593 int err;
594
595 if (dev->type != ARPHRD_ETHER || dev->flags & IFF_LOOPBACK)
596 return -EINVAL;
597
598 port = kzalloc(sizeof(*port), GFP_KERNEL);
599 if (port == NULL)
600 return -ENOMEM;
601
602 port->passthru = false;
603 port->dev = dev;
604 INIT_LIST_HEAD(&port->vlans);
605 for (i = 0; i < MACVLAN_HASH_SIZE; i++)
606 INIT_HLIST_HEAD(&port->vlan_hash[i]);
607
608 err = netdev_rx_handler_register(dev, macvlan_handle_frame, port);
609 if (err)
610 kfree(port);
611 else
612 dev->priv_flags |= IFF_MACVLAN_PORT;
613 return err;
614}
615
616static void macvlan_port_destroy(struct net_device *dev)
617{
618 struct macvlan_port *port = macvlan_port_get(dev);
619
620 dev->priv_flags &= ~IFF_MACVLAN_PORT;
621 netdev_rx_handler_unregister(dev);
622 kfree_rcu(port, rcu);
623}
624
625static int macvlan_validate(struct nlattr *tb[], struct nlattr *data[])
626{
627 if (tb[IFLA_ADDRESS]) {
628 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
629 return -EINVAL;
630 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
631 return -EADDRNOTAVAIL;
632 }
633
634 if (data && data[IFLA_MACVLAN_MODE]) {
635 switch (nla_get_u32(data[IFLA_MACVLAN_MODE])) {
636 case MACVLAN_MODE_PRIVATE:
637 case MACVLAN_MODE_VEPA:
638 case MACVLAN_MODE_BRIDGE:
639 case MACVLAN_MODE_PASSTHRU:
640 break;
641 default:
642 return -EINVAL;
643 }
644 }
645 return 0;
646}
647
648int macvlan_common_newlink(struct net *src_net, struct net_device *dev,
649 struct nlattr *tb[], struct nlattr *data[],
650 int (*receive)(struct sk_buff *skb),
651 int (*forward)(struct net_device *dev,
652 struct sk_buff *skb))
653{
654 struct macvlan_dev *vlan = netdev_priv(dev);
655 struct macvlan_port *port;
656 struct net_device *lowerdev;
657 int err;
658
659 if (!tb[IFLA_LINK])
660 return -EINVAL;
661
662 lowerdev = __dev_get_by_index(src_net, nla_get_u32(tb[IFLA_LINK]));
663 if (lowerdev == NULL)
664 return -ENODEV;
665
666 /* When creating macvlans on top of other macvlans - use
667 * the real device as the lowerdev.
668 */
669 if (lowerdev->rtnl_link_ops == dev->rtnl_link_ops) {
670 struct macvlan_dev *lowervlan = netdev_priv(lowerdev);
671 lowerdev = lowervlan->lowerdev;
672 }
673
674 if (!tb[IFLA_MTU])
675 dev->mtu = lowerdev->mtu;
676 else if (dev->mtu > lowerdev->mtu)
677 return -EINVAL;
678
679 if (!tb[IFLA_ADDRESS])
680 random_ether_addr(dev->dev_addr);
681
682 if (!macvlan_port_exists(lowerdev)) {
683 err = macvlan_port_create(lowerdev);
684 if (err < 0)
685 return err;
686 }
687 port = macvlan_port_get(lowerdev);
688
689 /* Only 1 macvlan device can be created in passthru mode */
690 if (port->passthru)
691 return -EINVAL;
692
693 vlan->lowerdev = lowerdev;
694 vlan->dev = dev;
695 vlan->port = port;
696 vlan->receive = receive;
697 vlan->forward = forward;
698
699 vlan->mode = MACVLAN_MODE_VEPA;
700 if (data && data[IFLA_MACVLAN_MODE])
701 vlan->mode = nla_get_u32(data[IFLA_MACVLAN_MODE]);
702
703 if (vlan->mode == MACVLAN_MODE_PASSTHRU) {
704 if (port->count)
705 return -EINVAL;
706 port->passthru = true;
707 memcpy(dev->dev_addr, lowerdev->dev_addr, ETH_ALEN);
708 }
709
710 port->count += 1;
711 err = register_netdevice(dev);
712 if (err < 0)
713 goto destroy_port;
714
715 list_add_tail(&vlan->list, &port->vlans);
716 netif_stacked_transfer_operstate(lowerdev, dev);
717
718 return 0;
719
720destroy_port:
721 port->count -= 1;
722 if (!port->count)
723 macvlan_port_destroy(lowerdev);
724
725 return err;
726}
727EXPORT_SYMBOL_GPL(macvlan_common_newlink);
728
729static int macvlan_newlink(struct net *src_net, struct net_device *dev,
730 struct nlattr *tb[], struct nlattr *data[])
731{
732 return macvlan_common_newlink(src_net, dev, tb, data,
733 netif_rx,
734 dev_forward_skb);
735}
736
737void macvlan_dellink(struct net_device *dev, struct list_head *head)
738{
739 struct macvlan_dev *vlan = netdev_priv(dev);
740
741 list_del(&vlan->list);
742 unregister_netdevice_queue(dev, head);
743}
744EXPORT_SYMBOL_GPL(macvlan_dellink);
745
746static int macvlan_changelink(struct net_device *dev,
747 struct nlattr *tb[], struct nlattr *data[])
748{
749 struct macvlan_dev *vlan = netdev_priv(dev);
750 if (data && data[IFLA_MACVLAN_MODE])
751 vlan->mode = nla_get_u32(data[IFLA_MACVLAN_MODE]);
752 return 0;
753}
754
755static size_t macvlan_get_size(const struct net_device *dev)
756{
757 return nla_total_size(4);
758}
759
760static int macvlan_fill_info(struct sk_buff *skb,
761 const struct net_device *dev)
762{
763 struct macvlan_dev *vlan = netdev_priv(dev);
764
765 NLA_PUT_U32(skb, IFLA_MACVLAN_MODE, vlan->mode);
766 return 0;
767
768nla_put_failure:
769 return -EMSGSIZE;
770}
771
772static const struct nla_policy macvlan_policy[IFLA_MACVLAN_MAX + 1] = {
773 [IFLA_MACVLAN_MODE] = { .type = NLA_U32 },
774};
775
776int macvlan_link_register(struct rtnl_link_ops *ops)
777{
778 /* common fields */
779 ops->priv_size = sizeof(struct macvlan_dev);
780 ops->validate = macvlan_validate;
781 ops->maxtype = IFLA_MACVLAN_MAX;
782 ops->policy = macvlan_policy;
783 ops->changelink = macvlan_changelink;
784 ops->get_size = macvlan_get_size;
785 ops->fill_info = macvlan_fill_info;
786
787 return rtnl_link_register(ops);
788};
789EXPORT_SYMBOL_GPL(macvlan_link_register);
790
791static struct rtnl_link_ops macvlan_link_ops = {
792 .kind = "macvlan",
793 .setup = macvlan_setup,
794 .newlink = macvlan_newlink,
795 .dellink = macvlan_dellink,
796};
797
798static int macvlan_device_event(struct notifier_block *unused,
799 unsigned long event, void *ptr)
800{
801 struct net_device *dev = ptr;
802 struct macvlan_dev *vlan, *next;
803 struct macvlan_port *port;
804 LIST_HEAD(list_kill);
805
806 if (!macvlan_port_exists(dev))
807 return NOTIFY_DONE;
808
809 port = macvlan_port_get(dev);
810
811 switch (event) {
812 case NETDEV_CHANGE:
813 list_for_each_entry(vlan, &port->vlans, list)
814 netif_stacked_transfer_operstate(vlan->lowerdev,
815 vlan->dev);
816 break;
817 case NETDEV_FEAT_CHANGE:
818 list_for_each_entry(vlan, &port->vlans, list) {
819 vlan->dev->features = dev->features & MACVLAN_FEATURES;
820 vlan->dev->gso_max_size = dev->gso_max_size;
821 netdev_features_change(vlan->dev);
822 }
823 break;
824 case NETDEV_UNREGISTER:
825 /* twiddle thumbs on netns device moves */
826 if (dev->reg_state != NETREG_UNREGISTERING)
827 break;
828
829 list_for_each_entry_safe(vlan, next, &port->vlans, list)
830 vlan->dev->rtnl_link_ops->dellink(vlan->dev, &list_kill);
831 unregister_netdevice_many(&list_kill);
832 list_del(&list_kill);
833 break;
834 case NETDEV_PRE_TYPE_CHANGE:
835 /* Forbid underlaying device to change its type. */
836 return NOTIFY_BAD;
837 }
838 return NOTIFY_DONE;
839}
840
841static struct notifier_block macvlan_notifier_block __read_mostly = {
842 .notifier_call = macvlan_device_event,
843};
844
845static int __init macvlan_init_module(void)
846{
847 int err;
848
849 register_netdevice_notifier(&macvlan_notifier_block);
850
851 err = macvlan_link_register(&macvlan_link_ops);
852 if (err < 0)
853 goto err1;
854 return 0;
855err1:
856 unregister_netdevice_notifier(&macvlan_notifier_block);
857 return err;
858}
859
860static void __exit macvlan_cleanup_module(void)
861{
862 rtnl_link_unregister(&macvlan_link_ops);
863 unregister_netdevice_notifier(&macvlan_notifier_block);
864}
865
866module_init(macvlan_init_module);
867module_exit(macvlan_cleanup_module);
868
869MODULE_LICENSE("GPL");
870MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>");
871MODULE_DESCRIPTION("Driver for MAC address based VLANs");
872MODULE_ALIAS_RTNL_LINK("macvlan");
1/*
2 * Copyright (c) 2007 Patrick McHardy <kaber@trash.net>
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License as
6 * published by the Free Software Foundation; either version 2 of
7 * the License, or (at your option) any later version.
8 *
9 * The code this is based on carried the following copyright notice:
10 * ---
11 * (C) Copyright 2001-2006
12 * Alex Zeffertt, Cambridge Broadband Ltd, ajz@cambridgebroadband.com
13 * Re-worked by Ben Greear <greearb@candelatech.com>
14 * ---
15 */
16#include <linux/kernel.h>
17#include <linux/types.h>
18#include <linux/module.h>
19#include <linux/init.h>
20#include <linux/errno.h>
21#include <linux/slab.h>
22#include <linux/string.h>
23#include <linux/rculist.h>
24#include <linux/notifier.h>
25#include <linux/netdevice.h>
26#include <linux/etherdevice.h>
27#include <linux/ethtool.h>
28#include <linux/if_arp.h>
29#include <linux/if_vlan.h>
30#include <linux/if_link.h>
31#include <linux/if_macvlan.h>
32#include <linux/hash.h>
33#include <linux/workqueue.h>
34#include <net/rtnetlink.h>
35#include <net/xfrm.h>
36#include <linux/netpoll.h>
37
38#define MACVLAN_HASH_BITS 8
39#define MACVLAN_HASH_SIZE (1<<MACVLAN_HASH_BITS)
40#define MACVLAN_BC_QUEUE_LEN 1000
41
42struct macvlan_port {
43 struct net_device *dev;
44 struct hlist_head vlan_hash[MACVLAN_HASH_SIZE];
45 struct list_head vlans;
46 struct sk_buff_head bc_queue;
47 struct work_struct bc_work;
48 bool passthru;
49 int count;
50 struct hlist_head vlan_source_hash[MACVLAN_HASH_SIZE];
51 DECLARE_BITMAP(mc_filter, MACVLAN_MC_FILTER_SZ);
52};
53
54struct macvlan_source_entry {
55 struct hlist_node hlist;
56 struct macvlan_dev *vlan;
57 unsigned char addr[6+2] __aligned(sizeof(u16));
58 struct rcu_head rcu;
59};
60
61struct macvlan_skb_cb {
62 const struct macvlan_dev *src;
63};
64
65#define MACVLAN_SKB_CB(__skb) ((struct macvlan_skb_cb *)&((__skb)->cb[0]))
66
67static void macvlan_port_destroy(struct net_device *dev);
68
69/* Hash Ethernet address */
70static u32 macvlan_eth_hash(const unsigned char *addr)
71{
72 u64 value = get_unaligned((u64 *)addr);
73
74 /* only want 6 bytes */
75#ifdef __BIG_ENDIAN
76 value >>= 16;
77#else
78 value <<= 16;
79#endif
80 return hash_64(value, MACVLAN_HASH_BITS);
81}
82
83static struct macvlan_port *macvlan_port_get_rcu(const struct net_device *dev)
84{
85 return rcu_dereference(dev->rx_handler_data);
86}
87
88static struct macvlan_port *macvlan_port_get_rtnl(const struct net_device *dev)
89{
90 return rtnl_dereference(dev->rx_handler_data);
91}
92
93#define macvlan_port_exists(dev) (dev->priv_flags & IFF_MACVLAN_PORT)
94
95static struct macvlan_dev *macvlan_hash_lookup(const struct macvlan_port *port,
96 const unsigned char *addr)
97{
98 struct macvlan_dev *vlan;
99 u32 idx = macvlan_eth_hash(addr);
100
101 hlist_for_each_entry_rcu(vlan, &port->vlan_hash[idx], hlist) {
102 if (ether_addr_equal_64bits(vlan->dev->dev_addr, addr))
103 return vlan;
104 }
105 return NULL;
106}
107
108static struct macvlan_source_entry *macvlan_hash_lookup_source(
109 const struct macvlan_dev *vlan,
110 const unsigned char *addr)
111{
112 struct macvlan_source_entry *entry;
113 u32 idx = macvlan_eth_hash(addr);
114 struct hlist_head *h = &vlan->port->vlan_source_hash[idx];
115
116 hlist_for_each_entry_rcu(entry, h, hlist) {
117 if (ether_addr_equal_64bits(entry->addr, addr) &&
118 entry->vlan == vlan)
119 return entry;
120 }
121 return NULL;
122}
123
124static int macvlan_hash_add_source(struct macvlan_dev *vlan,
125 const unsigned char *addr)
126{
127 struct macvlan_port *port = vlan->port;
128 struct macvlan_source_entry *entry;
129 struct hlist_head *h;
130
131 entry = macvlan_hash_lookup_source(vlan, addr);
132 if (entry)
133 return 0;
134
135 entry = kmalloc(sizeof(*entry), GFP_KERNEL);
136 if (!entry)
137 return -ENOMEM;
138
139 ether_addr_copy(entry->addr, addr);
140 entry->vlan = vlan;
141 h = &port->vlan_source_hash[macvlan_eth_hash(addr)];
142 hlist_add_head_rcu(&entry->hlist, h);
143 vlan->macaddr_count++;
144
145 return 0;
146}
147
148static void macvlan_hash_add(struct macvlan_dev *vlan)
149{
150 struct macvlan_port *port = vlan->port;
151 const unsigned char *addr = vlan->dev->dev_addr;
152 u32 idx = macvlan_eth_hash(addr);
153
154 hlist_add_head_rcu(&vlan->hlist, &port->vlan_hash[idx]);
155}
156
157static void macvlan_hash_del_source(struct macvlan_source_entry *entry)
158{
159 hlist_del_rcu(&entry->hlist);
160 kfree_rcu(entry, rcu);
161}
162
163static void macvlan_hash_del(struct macvlan_dev *vlan, bool sync)
164{
165 hlist_del_rcu(&vlan->hlist);
166 if (sync)
167 synchronize_rcu();
168}
169
170static void macvlan_hash_change_addr(struct macvlan_dev *vlan,
171 const unsigned char *addr)
172{
173 macvlan_hash_del(vlan, true);
174 /* Now that we are unhashed it is safe to change the device
175 * address without confusing packet delivery.
176 */
177 memcpy(vlan->dev->dev_addr, addr, ETH_ALEN);
178 macvlan_hash_add(vlan);
179}
180
181static bool macvlan_addr_busy(const struct macvlan_port *port,
182 const unsigned char *addr)
183{
184 /* Test to see if the specified multicast address is
185 * currently in use by the underlying device or
186 * another macvlan.
187 */
188 if (ether_addr_equal_64bits(port->dev->dev_addr, addr))
189 return true;
190
191 if (macvlan_hash_lookup(port, addr))
192 return true;
193
194 return false;
195}
196
197
198static int macvlan_broadcast_one(struct sk_buff *skb,
199 const struct macvlan_dev *vlan,
200 const struct ethhdr *eth, bool local)
201{
202 struct net_device *dev = vlan->dev;
203
204 if (local)
205 return __dev_forward_skb(dev, skb);
206
207 skb->dev = dev;
208 if (ether_addr_equal_64bits(eth->h_dest, dev->broadcast))
209 skb->pkt_type = PACKET_BROADCAST;
210 else
211 skb->pkt_type = PACKET_MULTICAST;
212
213 return 0;
214}
215
216static u32 macvlan_hash_mix(const struct macvlan_dev *vlan)
217{
218 return (u32)(((unsigned long)vlan) >> L1_CACHE_SHIFT);
219}
220
221
222static unsigned int mc_hash(const struct macvlan_dev *vlan,
223 const unsigned char *addr)
224{
225 u32 val = __get_unaligned_cpu32(addr + 2);
226
227 val ^= macvlan_hash_mix(vlan);
228 return hash_32(val, MACVLAN_MC_FILTER_BITS);
229}
230
231static void macvlan_broadcast(struct sk_buff *skb,
232 const struct macvlan_port *port,
233 struct net_device *src,
234 enum macvlan_mode mode)
235{
236 const struct ethhdr *eth = eth_hdr(skb);
237 const struct macvlan_dev *vlan;
238 struct sk_buff *nskb;
239 unsigned int i;
240 int err;
241 unsigned int hash;
242
243 if (skb->protocol == htons(ETH_P_PAUSE))
244 return;
245
246 for (i = 0; i < MACVLAN_HASH_SIZE; i++) {
247 hlist_for_each_entry_rcu(vlan, &port->vlan_hash[i], hlist) {
248 if (vlan->dev == src || !(vlan->mode & mode))
249 continue;
250
251 hash = mc_hash(vlan, eth->h_dest);
252 if (!test_bit(hash, vlan->mc_filter))
253 continue;
254
255 err = NET_RX_DROP;
256 nskb = skb_clone(skb, GFP_ATOMIC);
257 if (likely(nskb))
258 err = macvlan_broadcast_one(
259 nskb, vlan, eth,
260 mode == MACVLAN_MODE_BRIDGE) ?:
261 netif_rx_ni(nskb);
262 macvlan_count_rx(vlan, skb->len + ETH_HLEN,
263 err == NET_RX_SUCCESS, true);
264 }
265 }
266}
267
268static void macvlan_process_broadcast(struct work_struct *w)
269{
270 struct macvlan_port *port = container_of(w, struct macvlan_port,
271 bc_work);
272 struct sk_buff *skb;
273 struct sk_buff_head list;
274
275 __skb_queue_head_init(&list);
276
277 spin_lock_bh(&port->bc_queue.lock);
278 skb_queue_splice_tail_init(&port->bc_queue, &list);
279 spin_unlock_bh(&port->bc_queue.lock);
280
281 while ((skb = __skb_dequeue(&list))) {
282 const struct macvlan_dev *src = MACVLAN_SKB_CB(skb)->src;
283
284 rcu_read_lock();
285
286 if (!src)
287 /* frame comes from an external address */
288 macvlan_broadcast(skb, port, NULL,
289 MACVLAN_MODE_PRIVATE |
290 MACVLAN_MODE_VEPA |
291 MACVLAN_MODE_PASSTHRU|
292 MACVLAN_MODE_BRIDGE);
293 else if (src->mode == MACVLAN_MODE_VEPA)
294 /* flood to everyone except source */
295 macvlan_broadcast(skb, port, src->dev,
296 MACVLAN_MODE_VEPA |
297 MACVLAN_MODE_BRIDGE);
298 else
299 /*
300 * flood only to VEPA ports, bridge ports
301 * already saw the frame on the way out.
302 */
303 macvlan_broadcast(skb, port, src->dev,
304 MACVLAN_MODE_VEPA);
305
306 rcu_read_unlock();
307
308 if (src)
309 dev_put(src->dev);
310 kfree_skb(skb);
311 }
312}
313
314static void macvlan_broadcast_enqueue(struct macvlan_port *port,
315 const struct macvlan_dev *src,
316 struct sk_buff *skb)
317{
318 struct sk_buff *nskb;
319 int err = -ENOMEM;
320
321 nskb = skb_clone(skb, GFP_ATOMIC);
322 if (!nskb)
323 goto err;
324
325 MACVLAN_SKB_CB(nskb)->src = src;
326
327 spin_lock(&port->bc_queue.lock);
328 if (skb_queue_len(&port->bc_queue) < MACVLAN_BC_QUEUE_LEN) {
329 if (src)
330 dev_hold(src->dev);
331 __skb_queue_tail(&port->bc_queue, nskb);
332 err = 0;
333 }
334 spin_unlock(&port->bc_queue.lock);
335
336 if (err)
337 goto free_nskb;
338
339 schedule_work(&port->bc_work);
340 return;
341
342free_nskb:
343 kfree_skb(nskb);
344err:
345 atomic_long_inc(&skb->dev->rx_dropped);
346}
347
348static void macvlan_flush_sources(struct macvlan_port *port,
349 struct macvlan_dev *vlan)
350{
351 int i;
352
353 for (i = 0; i < MACVLAN_HASH_SIZE; i++) {
354 struct hlist_node *h, *n;
355
356 hlist_for_each_safe(h, n, &port->vlan_source_hash[i]) {
357 struct macvlan_source_entry *entry;
358
359 entry = hlist_entry(h, struct macvlan_source_entry,
360 hlist);
361 if (entry->vlan == vlan)
362 macvlan_hash_del_source(entry);
363 }
364 }
365 vlan->macaddr_count = 0;
366}
367
368static void macvlan_forward_source_one(struct sk_buff *skb,
369 struct macvlan_dev *vlan)
370{
371 struct sk_buff *nskb;
372 struct net_device *dev;
373 int len;
374 int ret;
375
376 dev = vlan->dev;
377 if (unlikely(!(dev->flags & IFF_UP)))
378 return;
379
380 nskb = skb_clone(skb, GFP_ATOMIC);
381 if (!nskb)
382 return;
383
384 len = nskb->len + ETH_HLEN;
385 nskb->dev = dev;
386 nskb->pkt_type = PACKET_HOST;
387
388 ret = netif_rx(nskb);
389 macvlan_count_rx(vlan, len, ret == NET_RX_SUCCESS, false);
390}
391
392static void macvlan_forward_source(struct sk_buff *skb,
393 struct macvlan_port *port,
394 const unsigned char *addr)
395{
396 struct macvlan_source_entry *entry;
397 u32 idx = macvlan_eth_hash(addr);
398 struct hlist_head *h = &port->vlan_source_hash[idx];
399
400 hlist_for_each_entry_rcu(entry, h, hlist) {
401 if (ether_addr_equal_64bits(entry->addr, addr))
402 macvlan_forward_source_one(skb, entry->vlan);
403 }
404}
405
406/* called under rcu_read_lock() from netif_receive_skb */
407static rx_handler_result_t macvlan_handle_frame(struct sk_buff **pskb)
408{
409 struct macvlan_port *port;
410 struct sk_buff *skb = *pskb;
411 const struct ethhdr *eth = eth_hdr(skb);
412 const struct macvlan_dev *vlan;
413 const struct macvlan_dev *src;
414 struct net_device *dev;
415 unsigned int len = 0;
416 int ret;
417 rx_handler_result_t handle_res;
418
419 port = macvlan_port_get_rcu(skb->dev);
420 if (is_multicast_ether_addr(eth->h_dest)) {
421 unsigned int hash;
422
423 skb = ip_check_defrag(dev_net(skb->dev), skb, IP_DEFRAG_MACVLAN);
424 if (!skb)
425 return RX_HANDLER_CONSUMED;
426 *pskb = skb;
427 eth = eth_hdr(skb);
428 macvlan_forward_source(skb, port, eth->h_source);
429 src = macvlan_hash_lookup(port, eth->h_source);
430 if (src && src->mode != MACVLAN_MODE_VEPA &&
431 src->mode != MACVLAN_MODE_BRIDGE) {
432 /* forward to original port. */
433 vlan = src;
434 ret = macvlan_broadcast_one(skb, vlan, eth, 0) ?:
435 netif_rx(skb);
436 handle_res = RX_HANDLER_CONSUMED;
437 goto out;
438 }
439
440 hash = mc_hash(NULL, eth->h_dest);
441 if (test_bit(hash, port->mc_filter))
442 macvlan_broadcast_enqueue(port, src, skb);
443
444 return RX_HANDLER_PASS;
445 }
446
447 macvlan_forward_source(skb, port, eth->h_source);
448 if (port->passthru)
449 vlan = list_first_or_null_rcu(&port->vlans,
450 struct macvlan_dev, list);
451 else
452 vlan = macvlan_hash_lookup(port, eth->h_dest);
453 if (vlan == NULL)
454 return RX_HANDLER_PASS;
455
456 dev = vlan->dev;
457 if (unlikely(!(dev->flags & IFF_UP))) {
458 kfree_skb(skb);
459 return RX_HANDLER_CONSUMED;
460 }
461 len = skb->len + ETH_HLEN;
462 skb = skb_share_check(skb, GFP_ATOMIC);
463 if (!skb) {
464 ret = NET_RX_DROP;
465 handle_res = RX_HANDLER_CONSUMED;
466 goto out;
467 }
468
469 *pskb = skb;
470 skb->dev = dev;
471 skb->pkt_type = PACKET_HOST;
472
473 ret = NET_RX_SUCCESS;
474 handle_res = RX_HANDLER_ANOTHER;
475out:
476 macvlan_count_rx(vlan, len, ret == NET_RX_SUCCESS, false);
477 return handle_res;
478}
479
480static int macvlan_queue_xmit(struct sk_buff *skb, struct net_device *dev)
481{
482 const struct macvlan_dev *vlan = netdev_priv(dev);
483 const struct macvlan_port *port = vlan->port;
484 const struct macvlan_dev *dest;
485
486 if (vlan->mode == MACVLAN_MODE_BRIDGE) {
487 const struct ethhdr *eth = (void *)skb->data;
488
489 /* send to other bridge ports directly */
490 if (is_multicast_ether_addr(eth->h_dest)) {
491 macvlan_broadcast(skb, port, dev, MACVLAN_MODE_BRIDGE);
492 goto xmit_world;
493 }
494
495 dest = macvlan_hash_lookup(port, eth->h_dest);
496 if (dest && dest->mode == MACVLAN_MODE_BRIDGE) {
497 /* send to lowerdev first for its network taps */
498 dev_forward_skb(vlan->lowerdev, skb);
499
500 return NET_XMIT_SUCCESS;
501 }
502 }
503
504xmit_world:
505 skb->dev = vlan->lowerdev;
506 return dev_queue_xmit(skb);
507}
508
509static inline netdev_tx_t macvlan_netpoll_send_skb(struct macvlan_dev *vlan, struct sk_buff *skb)
510{
511#ifdef CONFIG_NET_POLL_CONTROLLER
512 if (vlan->netpoll)
513 netpoll_send_skb(vlan->netpoll, skb);
514#else
515 BUG();
516#endif
517 return NETDEV_TX_OK;
518}
519
520static netdev_tx_t macvlan_start_xmit(struct sk_buff *skb,
521 struct net_device *dev)
522{
523 unsigned int len = skb->len;
524 int ret;
525 struct macvlan_dev *vlan = netdev_priv(dev);
526
527 if (unlikely(netpoll_tx_running(dev)))
528 return macvlan_netpoll_send_skb(vlan, skb);
529
530 if (vlan->fwd_priv) {
531 skb->dev = vlan->lowerdev;
532 ret = dev_queue_xmit_accel(skb, vlan->fwd_priv);
533 } else {
534 ret = macvlan_queue_xmit(skb, dev);
535 }
536
537 if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN)) {
538 struct vlan_pcpu_stats *pcpu_stats;
539
540 pcpu_stats = this_cpu_ptr(vlan->pcpu_stats);
541 u64_stats_update_begin(&pcpu_stats->syncp);
542 pcpu_stats->tx_packets++;
543 pcpu_stats->tx_bytes += len;
544 u64_stats_update_end(&pcpu_stats->syncp);
545 } else {
546 this_cpu_inc(vlan->pcpu_stats->tx_dropped);
547 }
548 return ret;
549}
550
551static int macvlan_hard_header(struct sk_buff *skb, struct net_device *dev,
552 unsigned short type, const void *daddr,
553 const void *saddr, unsigned len)
554{
555 const struct macvlan_dev *vlan = netdev_priv(dev);
556 struct net_device *lowerdev = vlan->lowerdev;
557
558 return dev_hard_header(skb, lowerdev, type, daddr,
559 saddr ? : dev->dev_addr, len);
560}
561
562static const struct header_ops macvlan_hard_header_ops = {
563 .create = macvlan_hard_header,
564 .parse = eth_header_parse,
565 .cache = eth_header_cache,
566 .cache_update = eth_header_cache_update,
567};
568
569static struct rtnl_link_ops macvlan_link_ops;
570
571static int macvlan_open(struct net_device *dev)
572{
573 struct macvlan_dev *vlan = netdev_priv(dev);
574 struct net_device *lowerdev = vlan->lowerdev;
575 int err;
576
577 if (vlan->port->passthru) {
578 if (!(vlan->flags & MACVLAN_FLAG_NOPROMISC)) {
579 err = dev_set_promiscuity(lowerdev, 1);
580 if (err < 0)
581 goto out;
582 }
583 goto hash_add;
584 }
585
586 if (lowerdev->features & NETIF_F_HW_L2FW_DOFFLOAD &&
587 dev->rtnl_link_ops == &macvlan_link_ops) {
588 vlan->fwd_priv =
589 lowerdev->netdev_ops->ndo_dfwd_add_station(lowerdev, dev);
590
591 /* If we get a NULL pointer back, or if we get an error
592 * then we should just fall through to the non accelerated path
593 */
594 if (IS_ERR_OR_NULL(vlan->fwd_priv)) {
595 vlan->fwd_priv = NULL;
596 } else
597 return 0;
598 }
599
600 err = -EBUSY;
601 if (macvlan_addr_busy(vlan->port, dev->dev_addr))
602 goto out;
603
604 err = dev_uc_add(lowerdev, dev->dev_addr);
605 if (err < 0)
606 goto out;
607 if (dev->flags & IFF_ALLMULTI) {
608 err = dev_set_allmulti(lowerdev, 1);
609 if (err < 0)
610 goto del_unicast;
611 }
612
613 if (dev->flags & IFF_PROMISC) {
614 err = dev_set_promiscuity(lowerdev, 1);
615 if (err < 0)
616 goto clear_multi;
617 }
618
619hash_add:
620 macvlan_hash_add(vlan);
621 return 0;
622
623clear_multi:
624 if (dev->flags & IFF_ALLMULTI)
625 dev_set_allmulti(lowerdev, -1);
626del_unicast:
627 dev_uc_del(lowerdev, dev->dev_addr);
628out:
629 if (vlan->fwd_priv) {
630 lowerdev->netdev_ops->ndo_dfwd_del_station(lowerdev,
631 vlan->fwd_priv);
632 vlan->fwd_priv = NULL;
633 }
634 return err;
635}
636
637static int macvlan_stop(struct net_device *dev)
638{
639 struct macvlan_dev *vlan = netdev_priv(dev);
640 struct net_device *lowerdev = vlan->lowerdev;
641
642 if (vlan->fwd_priv) {
643 lowerdev->netdev_ops->ndo_dfwd_del_station(lowerdev,
644 vlan->fwd_priv);
645 vlan->fwd_priv = NULL;
646 return 0;
647 }
648
649 dev_uc_unsync(lowerdev, dev);
650 dev_mc_unsync(lowerdev, dev);
651
652 if (vlan->port->passthru) {
653 if (!(vlan->flags & MACVLAN_FLAG_NOPROMISC))
654 dev_set_promiscuity(lowerdev, -1);
655 goto hash_del;
656 }
657
658 if (dev->flags & IFF_ALLMULTI)
659 dev_set_allmulti(lowerdev, -1);
660
661 if (dev->flags & IFF_PROMISC)
662 dev_set_promiscuity(lowerdev, -1);
663
664 dev_uc_del(lowerdev, dev->dev_addr);
665
666hash_del:
667 macvlan_hash_del(vlan, !dev->dismantle);
668 return 0;
669}
670
671static int macvlan_sync_address(struct net_device *dev, unsigned char *addr)
672{
673 struct macvlan_dev *vlan = netdev_priv(dev);
674 struct net_device *lowerdev = vlan->lowerdev;
675 int err;
676
677 if (!(dev->flags & IFF_UP)) {
678 /* Just copy in the new address */
679 ether_addr_copy(dev->dev_addr, addr);
680 } else {
681 /* Rehash and update the device filters */
682 if (macvlan_addr_busy(vlan->port, addr))
683 return -EBUSY;
684
685 if (!vlan->port->passthru) {
686 err = dev_uc_add(lowerdev, addr);
687 if (err)
688 return err;
689
690 dev_uc_del(lowerdev, dev->dev_addr);
691 }
692
693 macvlan_hash_change_addr(vlan, addr);
694 }
695 return 0;
696}
697
698static int macvlan_set_mac_address(struct net_device *dev, void *p)
699{
700 struct macvlan_dev *vlan = netdev_priv(dev);
701 struct sockaddr *addr = p;
702
703 if (!is_valid_ether_addr(addr->sa_data))
704 return -EADDRNOTAVAIL;
705
706 if (vlan->mode == MACVLAN_MODE_PASSTHRU) {
707 dev_set_mac_address(vlan->lowerdev, addr);
708 return 0;
709 }
710
711 return macvlan_sync_address(dev, addr->sa_data);
712}
713
714static void macvlan_change_rx_flags(struct net_device *dev, int change)
715{
716 struct macvlan_dev *vlan = netdev_priv(dev);
717 struct net_device *lowerdev = vlan->lowerdev;
718
719 if (dev->flags & IFF_UP) {
720 if (change & IFF_ALLMULTI)
721 dev_set_allmulti(lowerdev, dev->flags & IFF_ALLMULTI ? 1 : -1);
722 if (change & IFF_PROMISC)
723 dev_set_promiscuity(lowerdev,
724 dev->flags & IFF_PROMISC ? 1 : -1);
725
726 }
727}
728
729static void macvlan_compute_filter(unsigned long *mc_filter,
730 struct net_device *dev,
731 struct macvlan_dev *vlan)
732{
733 if (dev->flags & (IFF_PROMISC | IFF_ALLMULTI)) {
734 bitmap_fill(mc_filter, MACVLAN_MC_FILTER_SZ);
735 } else {
736 struct netdev_hw_addr *ha;
737 DECLARE_BITMAP(filter, MACVLAN_MC_FILTER_SZ);
738
739 bitmap_zero(filter, MACVLAN_MC_FILTER_SZ);
740 netdev_for_each_mc_addr(ha, dev) {
741 __set_bit(mc_hash(vlan, ha->addr), filter);
742 }
743
744 __set_bit(mc_hash(vlan, dev->broadcast), filter);
745
746 bitmap_copy(mc_filter, filter, MACVLAN_MC_FILTER_SZ);
747 }
748}
749
750static void macvlan_set_mac_lists(struct net_device *dev)
751{
752 struct macvlan_dev *vlan = netdev_priv(dev);
753
754 macvlan_compute_filter(vlan->mc_filter, dev, vlan);
755
756 dev_uc_sync(vlan->lowerdev, dev);
757 dev_mc_sync(vlan->lowerdev, dev);
758
759 /* This is slightly inaccurate as we're including the subscription
760 * list of vlan->lowerdev too.
761 *
762 * Bug alert: This only works if everyone has the same broadcast
763 * address as lowerdev. As soon as someone changes theirs this
764 * will break.
765 *
766 * However, this is already broken as when you change your broadcast
767 * address we don't get called.
768 *
769 * The solution is to maintain a list of broadcast addresses like
770 * we do for uc/mc, if you care.
771 */
772 macvlan_compute_filter(vlan->port->mc_filter, vlan->lowerdev, NULL);
773}
774
775static int macvlan_change_mtu(struct net_device *dev, int new_mtu)
776{
777 struct macvlan_dev *vlan = netdev_priv(dev);
778
779 if (vlan->lowerdev->mtu < new_mtu)
780 return -EINVAL;
781 dev->mtu = new_mtu;
782 return 0;
783}
784
785/*
786 * macvlan network devices have devices nesting below it and are a special
787 * "super class" of normal network devices; split their locks off into a
788 * separate class since they always nest.
789 */
790static struct lock_class_key macvlan_netdev_addr_lock_key;
791
792#define ALWAYS_ON_FEATURES \
793 (NETIF_F_SG | NETIF_F_HW_CSUM | NETIF_F_GSO_SOFTWARE | NETIF_F_LLTX | \
794 NETIF_F_GSO_ROBUST)
795
796#define MACVLAN_FEATURES \
797 (NETIF_F_SG | NETIF_F_HW_CSUM | NETIF_F_HIGHDMA | NETIF_F_FRAGLIST | \
798 NETIF_F_GSO | NETIF_F_TSO | NETIF_F_UFO | NETIF_F_LRO | \
799 NETIF_F_TSO_ECN | NETIF_F_TSO6 | NETIF_F_GRO | NETIF_F_RXCSUM | \
800 NETIF_F_HW_VLAN_CTAG_FILTER | NETIF_F_HW_VLAN_STAG_FILTER)
801
802#define MACVLAN_STATE_MASK \
803 ((1<<__LINK_STATE_NOCARRIER) | (1<<__LINK_STATE_DORMANT))
804
805static int macvlan_get_nest_level(struct net_device *dev)
806{
807 return ((struct macvlan_dev *)netdev_priv(dev))->nest_level;
808}
809
810static void macvlan_set_lockdep_class(struct net_device *dev)
811{
812 netdev_lockdep_set_classes(dev);
813 lockdep_set_class_and_subclass(&dev->addr_list_lock,
814 &macvlan_netdev_addr_lock_key,
815 macvlan_get_nest_level(dev));
816}
817
818static int macvlan_init(struct net_device *dev)
819{
820 struct macvlan_dev *vlan = netdev_priv(dev);
821 const struct net_device *lowerdev = vlan->lowerdev;
822 struct macvlan_port *port = vlan->port;
823
824 dev->state = (dev->state & ~MACVLAN_STATE_MASK) |
825 (lowerdev->state & MACVLAN_STATE_MASK);
826 dev->features = lowerdev->features & MACVLAN_FEATURES;
827 dev->features |= ALWAYS_ON_FEATURES;
828 dev->hw_features |= NETIF_F_LRO;
829 dev->vlan_features = lowerdev->vlan_features & MACVLAN_FEATURES;
830 dev->gso_max_size = lowerdev->gso_max_size;
831 dev->gso_max_segs = lowerdev->gso_max_segs;
832 dev->hard_header_len = lowerdev->hard_header_len;
833
834 macvlan_set_lockdep_class(dev);
835
836 vlan->pcpu_stats = netdev_alloc_pcpu_stats(struct vlan_pcpu_stats);
837 if (!vlan->pcpu_stats)
838 return -ENOMEM;
839
840 port->count += 1;
841
842 return 0;
843}
844
845static void macvlan_uninit(struct net_device *dev)
846{
847 struct macvlan_dev *vlan = netdev_priv(dev);
848 struct macvlan_port *port = vlan->port;
849
850 free_percpu(vlan->pcpu_stats);
851
852 macvlan_flush_sources(port, vlan);
853 port->count -= 1;
854 if (!port->count)
855 macvlan_port_destroy(port->dev);
856}
857
858static struct rtnl_link_stats64 *macvlan_dev_get_stats64(struct net_device *dev,
859 struct rtnl_link_stats64 *stats)
860{
861 struct macvlan_dev *vlan = netdev_priv(dev);
862
863 if (vlan->pcpu_stats) {
864 struct vlan_pcpu_stats *p;
865 u64 rx_packets, rx_bytes, rx_multicast, tx_packets, tx_bytes;
866 u32 rx_errors = 0, tx_dropped = 0;
867 unsigned int start;
868 int i;
869
870 for_each_possible_cpu(i) {
871 p = per_cpu_ptr(vlan->pcpu_stats, i);
872 do {
873 start = u64_stats_fetch_begin_irq(&p->syncp);
874 rx_packets = p->rx_packets;
875 rx_bytes = p->rx_bytes;
876 rx_multicast = p->rx_multicast;
877 tx_packets = p->tx_packets;
878 tx_bytes = p->tx_bytes;
879 } while (u64_stats_fetch_retry_irq(&p->syncp, start));
880
881 stats->rx_packets += rx_packets;
882 stats->rx_bytes += rx_bytes;
883 stats->multicast += rx_multicast;
884 stats->tx_packets += tx_packets;
885 stats->tx_bytes += tx_bytes;
886 /* rx_errors & tx_dropped are u32, updated
887 * without syncp protection.
888 */
889 rx_errors += p->rx_errors;
890 tx_dropped += p->tx_dropped;
891 }
892 stats->rx_errors = rx_errors;
893 stats->rx_dropped = rx_errors;
894 stats->tx_dropped = tx_dropped;
895 }
896 return stats;
897}
898
899static int macvlan_vlan_rx_add_vid(struct net_device *dev,
900 __be16 proto, u16 vid)
901{
902 struct macvlan_dev *vlan = netdev_priv(dev);
903 struct net_device *lowerdev = vlan->lowerdev;
904
905 return vlan_vid_add(lowerdev, proto, vid);
906}
907
908static int macvlan_vlan_rx_kill_vid(struct net_device *dev,
909 __be16 proto, u16 vid)
910{
911 struct macvlan_dev *vlan = netdev_priv(dev);
912 struct net_device *lowerdev = vlan->lowerdev;
913
914 vlan_vid_del(lowerdev, proto, vid);
915 return 0;
916}
917
918static int macvlan_fdb_add(struct ndmsg *ndm, struct nlattr *tb[],
919 struct net_device *dev,
920 const unsigned char *addr, u16 vid,
921 u16 flags)
922{
923 struct macvlan_dev *vlan = netdev_priv(dev);
924 int err = -EINVAL;
925
926 /* Support unicast filter only on passthru devices.
927 * Multicast filter should be allowed on all devices.
928 */
929 if (!vlan->port->passthru && is_unicast_ether_addr(addr))
930 return -EOPNOTSUPP;
931
932 if (flags & NLM_F_REPLACE)
933 return -EOPNOTSUPP;
934
935 if (is_unicast_ether_addr(addr))
936 err = dev_uc_add_excl(dev, addr);
937 else if (is_multicast_ether_addr(addr))
938 err = dev_mc_add_excl(dev, addr);
939
940 return err;
941}
942
943static int macvlan_fdb_del(struct ndmsg *ndm, struct nlattr *tb[],
944 struct net_device *dev,
945 const unsigned char *addr, u16 vid)
946{
947 struct macvlan_dev *vlan = netdev_priv(dev);
948 int err = -EINVAL;
949
950 /* Support unicast filter only on passthru devices.
951 * Multicast filter should be allowed on all devices.
952 */
953 if (!vlan->port->passthru && is_unicast_ether_addr(addr))
954 return -EOPNOTSUPP;
955
956 if (is_unicast_ether_addr(addr))
957 err = dev_uc_del(dev, addr);
958 else if (is_multicast_ether_addr(addr))
959 err = dev_mc_del(dev, addr);
960
961 return err;
962}
963
964static void macvlan_ethtool_get_drvinfo(struct net_device *dev,
965 struct ethtool_drvinfo *drvinfo)
966{
967 strlcpy(drvinfo->driver, "macvlan", sizeof(drvinfo->driver));
968 strlcpy(drvinfo->version, "0.1", sizeof(drvinfo->version));
969}
970
971static int macvlan_ethtool_get_link_ksettings(struct net_device *dev,
972 struct ethtool_link_ksettings *cmd)
973{
974 const struct macvlan_dev *vlan = netdev_priv(dev);
975
976 return __ethtool_get_link_ksettings(vlan->lowerdev, cmd);
977}
978
979static netdev_features_t macvlan_fix_features(struct net_device *dev,
980 netdev_features_t features)
981{
982 struct macvlan_dev *vlan = netdev_priv(dev);
983 netdev_features_t lowerdev_features = vlan->lowerdev->features;
984 netdev_features_t mask;
985
986 features |= NETIF_F_ALL_FOR_ALL;
987 features &= (vlan->set_features | ~MACVLAN_FEATURES);
988 mask = features;
989
990 lowerdev_features &= (features | ~NETIF_F_LRO);
991 features = netdev_increment_features(lowerdev_features, features, mask);
992 features |= ALWAYS_ON_FEATURES;
993 features &= ~NETIF_F_NETNS_LOCAL;
994
995 return features;
996}
997
998#ifdef CONFIG_NET_POLL_CONTROLLER
999static void macvlan_dev_poll_controller(struct net_device *dev)
1000{
1001 return;
1002}
1003
1004static int macvlan_dev_netpoll_setup(struct net_device *dev, struct netpoll_info *npinfo)
1005{
1006 struct macvlan_dev *vlan = netdev_priv(dev);
1007 struct net_device *real_dev = vlan->lowerdev;
1008 struct netpoll *netpoll;
1009 int err = 0;
1010
1011 netpoll = kzalloc(sizeof(*netpoll), GFP_KERNEL);
1012 err = -ENOMEM;
1013 if (!netpoll)
1014 goto out;
1015
1016 err = __netpoll_setup(netpoll, real_dev);
1017 if (err) {
1018 kfree(netpoll);
1019 goto out;
1020 }
1021
1022 vlan->netpoll = netpoll;
1023
1024out:
1025 return err;
1026}
1027
1028static void macvlan_dev_netpoll_cleanup(struct net_device *dev)
1029{
1030 struct macvlan_dev *vlan = netdev_priv(dev);
1031 struct netpoll *netpoll = vlan->netpoll;
1032
1033 if (!netpoll)
1034 return;
1035
1036 vlan->netpoll = NULL;
1037
1038 __netpoll_free_async(netpoll);
1039}
1040#endif /* CONFIG_NET_POLL_CONTROLLER */
1041
1042static int macvlan_dev_get_iflink(const struct net_device *dev)
1043{
1044 struct macvlan_dev *vlan = netdev_priv(dev);
1045
1046 return vlan->lowerdev->ifindex;
1047}
1048
1049static const struct ethtool_ops macvlan_ethtool_ops = {
1050 .get_link = ethtool_op_get_link,
1051 .get_link_ksettings = macvlan_ethtool_get_link_ksettings,
1052 .get_drvinfo = macvlan_ethtool_get_drvinfo,
1053};
1054
1055static const struct net_device_ops macvlan_netdev_ops = {
1056 .ndo_init = macvlan_init,
1057 .ndo_uninit = macvlan_uninit,
1058 .ndo_open = macvlan_open,
1059 .ndo_stop = macvlan_stop,
1060 .ndo_start_xmit = macvlan_start_xmit,
1061 .ndo_change_mtu = macvlan_change_mtu,
1062 .ndo_fix_features = macvlan_fix_features,
1063 .ndo_change_rx_flags = macvlan_change_rx_flags,
1064 .ndo_set_mac_address = macvlan_set_mac_address,
1065 .ndo_set_rx_mode = macvlan_set_mac_lists,
1066 .ndo_get_stats64 = macvlan_dev_get_stats64,
1067 .ndo_validate_addr = eth_validate_addr,
1068 .ndo_vlan_rx_add_vid = macvlan_vlan_rx_add_vid,
1069 .ndo_vlan_rx_kill_vid = macvlan_vlan_rx_kill_vid,
1070 .ndo_fdb_add = macvlan_fdb_add,
1071 .ndo_fdb_del = macvlan_fdb_del,
1072 .ndo_fdb_dump = ndo_dflt_fdb_dump,
1073 .ndo_get_lock_subclass = macvlan_get_nest_level,
1074#ifdef CONFIG_NET_POLL_CONTROLLER
1075 .ndo_poll_controller = macvlan_dev_poll_controller,
1076 .ndo_netpoll_setup = macvlan_dev_netpoll_setup,
1077 .ndo_netpoll_cleanup = macvlan_dev_netpoll_cleanup,
1078#endif
1079 .ndo_get_iflink = macvlan_dev_get_iflink,
1080 .ndo_features_check = passthru_features_check,
1081};
1082
1083void macvlan_common_setup(struct net_device *dev)
1084{
1085 ether_setup(dev);
1086
1087 dev->min_mtu = 0;
1088 dev->max_mtu = ETH_MAX_MTU;
1089 dev->priv_flags &= ~IFF_TX_SKB_SHARING;
1090 netif_keep_dst(dev);
1091 dev->priv_flags |= IFF_UNICAST_FLT;
1092 dev->netdev_ops = &macvlan_netdev_ops;
1093 dev->destructor = free_netdev;
1094 dev->header_ops = &macvlan_hard_header_ops;
1095 dev->ethtool_ops = &macvlan_ethtool_ops;
1096}
1097EXPORT_SYMBOL_GPL(macvlan_common_setup);
1098
1099static void macvlan_setup(struct net_device *dev)
1100{
1101 macvlan_common_setup(dev);
1102 dev->priv_flags |= IFF_NO_QUEUE;
1103}
1104
1105static int macvlan_port_create(struct net_device *dev)
1106{
1107 struct macvlan_port *port;
1108 unsigned int i;
1109 int err;
1110
1111 if (dev->type != ARPHRD_ETHER || dev->flags & IFF_LOOPBACK)
1112 return -EINVAL;
1113
1114 if (netif_is_ipvlan_port(dev))
1115 return -EBUSY;
1116
1117 port = kzalloc(sizeof(*port), GFP_KERNEL);
1118 if (port == NULL)
1119 return -ENOMEM;
1120
1121 port->passthru = false;
1122 port->dev = dev;
1123 INIT_LIST_HEAD(&port->vlans);
1124 for (i = 0; i < MACVLAN_HASH_SIZE; i++)
1125 INIT_HLIST_HEAD(&port->vlan_hash[i]);
1126 for (i = 0; i < MACVLAN_HASH_SIZE; i++)
1127 INIT_HLIST_HEAD(&port->vlan_source_hash[i]);
1128
1129 skb_queue_head_init(&port->bc_queue);
1130 INIT_WORK(&port->bc_work, macvlan_process_broadcast);
1131
1132 err = netdev_rx_handler_register(dev, macvlan_handle_frame, port);
1133 if (err)
1134 kfree(port);
1135 else
1136 dev->priv_flags |= IFF_MACVLAN_PORT;
1137 return err;
1138}
1139
1140static void macvlan_port_destroy(struct net_device *dev)
1141{
1142 struct macvlan_port *port = macvlan_port_get_rtnl(dev);
1143
1144 dev->priv_flags &= ~IFF_MACVLAN_PORT;
1145 netdev_rx_handler_unregister(dev);
1146
1147 /* After this point, no packet can schedule bc_work anymore,
1148 * but we need to cancel it and purge left skbs if any.
1149 */
1150 cancel_work_sync(&port->bc_work);
1151 __skb_queue_purge(&port->bc_queue);
1152
1153 kfree(port);
1154}
1155
1156static int macvlan_validate(struct nlattr *tb[], struct nlattr *data[])
1157{
1158 if (tb[IFLA_ADDRESS]) {
1159 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
1160 return -EINVAL;
1161 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
1162 return -EADDRNOTAVAIL;
1163 }
1164
1165 if (data && data[IFLA_MACVLAN_FLAGS] &&
1166 nla_get_u16(data[IFLA_MACVLAN_FLAGS]) & ~MACVLAN_FLAG_NOPROMISC)
1167 return -EINVAL;
1168
1169 if (data && data[IFLA_MACVLAN_MODE]) {
1170 switch (nla_get_u32(data[IFLA_MACVLAN_MODE])) {
1171 case MACVLAN_MODE_PRIVATE:
1172 case MACVLAN_MODE_VEPA:
1173 case MACVLAN_MODE_BRIDGE:
1174 case MACVLAN_MODE_PASSTHRU:
1175 case MACVLAN_MODE_SOURCE:
1176 break;
1177 default:
1178 return -EINVAL;
1179 }
1180 }
1181
1182 if (data && data[IFLA_MACVLAN_MACADDR_MODE]) {
1183 switch (nla_get_u32(data[IFLA_MACVLAN_MACADDR_MODE])) {
1184 case MACVLAN_MACADDR_ADD:
1185 case MACVLAN_MACADDR_DEL:
1186 case MACVLAN_MACADDR_FLUSH:
1187 case MACVLAN_MACADDR_SET:
1188 break;
1189 default:
1190 return -EINVAL;
1191 }
1192 }
1193
1194 if (data && data[IFLA_MACVLAN_MACADDR]) {
1195 if (nla_len(data[IFLA_MACVLAN_MACADDR]) != ETH_ALEN)
1196 return -EINVAL;
1197
1198 if (!is_valid_ether_addr(nla_data(data[IFLA_MACVLAN_MACADDR])))
1199 return -EADDRNOTAVAIL;
1200 }
1201
1202 if (data && data[IFLA_MACVLAN_MACADDR_COUNT])
1203 return -EINVAL;
1204
1205 return 0;
1206}
1207
1208/**
1209 * reconfigure list of remote source mac address
1210 * (only for macvlan devices in source mode)
1211 * Note regarding alignment: all netlink data is aligned to 4 Byte, which
1212 * suffices for both ether_addr_copy and ether_addr_equal_64bits usage.
1213 */
1214static int macvlan_changelink_sources(struct macvlan_dev *vlan, u32 mode,
1215 struct nlattr *data[])
1216{
1217 char *addr = NULL;
1218 int ret, rem, len;
1219 struct nlattr *nla, *head;
1220 struct macvlan_source_entry *entry;
1221
1222 if (data[IFLA_MACVLAN_MACADDR])
1223 addr = nla_data(data[IFLA_MACVLAN_MACADDR]);
1224
1225 if (mode == MACVLAN_MACADDR_ADD) {
1226 if (!addr)
1227 return -EINVAL;
1228
1229 return macvlan_hash_add_source(vlan, addr);
1230
1231 } else if (mode == MACVLAN_MACADDR_DEL) {
1232 if (!addr)
1233 return -EINVAL;
1234
1235 entry = macvlan_hash_lookup_source(vlan, addr);
1236 if (entry) {
1237 macvlan_hash_del_source(entry);
1238 vlan->macaddr_count--;
1239 }
1240 } else if (mode == MACVLAN_MACADDR_FLUSH) {
1241 macvlan_flush_sources(vlan->port, vlan);
1242 } else if (mode == MACVLAN_MACADDR_SET) {
1243 macvlan_flush_sources(vlan->port, vlan);
1244
1245 if (addr) {
1246 ret = macvlan_hash_add_source(vlan, addr);
1247 if (ret)
1248 return ret;
1249 }
1250
1251 if (!data || !data[IFLA_MACVLAN_MACADDR_DATA])
1252 return 0;
1253
1254 head = nla_data(data[IFLA_MACVLAN_MACADDR_DATA]);
1255 len = nla_len(data[IFLA_MACVLAN_MACADDR_DATA]);
1256
1257 nla_for_each_attr(nla, head, len, rem) {
1258 if (nla_type(nla) != IFLA_MACVLAN_MACADDR ||
1259 nla_len(nla) != ETH_ALEN)
1260 continue;
1261
1262 addr = nla_data(nla);
1263 ret = macvlan_hash_add_source(vlan, addr);
1264 if (ret)
1265 return ret;
1266 }
1267 } else {
1268 return -EINVAL;
1269 }
1270
1271 return 0;
1272}
1273
1274int macvlan_common_newlink(struct net *src_net, struct net_device *dev,
1275 struct nlattr *tb[], struct nlattr *data[])
1276{
1277 struct macvlan_dev *vlan = netdev_priv(dev);
1278 struct macvlan_port *port;
1279 struct net_device *lowerdev;
1280 int err;
1281 int macmode;
1282 bool create = false;
1283
1284 if (!tb[IFLA_LINK])
1285 return -EINVAL;
1286
1287 lowerdev = __dev_get_by_index(src_net, nla_get_u32(tb[IFLA_LINK]));
1288 if (lowerdev == NULL)
1289 return -ENODEV;
1290
1291 /* When creating macvlans or macvtaps on top of other macvlans - use
1292 * the real device as the lowerdev.
1293 */
1294 if (netif_is_macvlan(lowerdev))
1295 lowerdev = macvlan_dev_real_dev(lowerdev);
1296
1297 if (!tb[IFLA_MTU])
1298 dev->mtu = lowerdev->mtu;
1299 else if (dev->mtu > lowerdev->mtu)
1300 return -EINVAL;
1301
1302 /* MTU range: 68 - lowerdev->max_mtu */
1303 dev->min_mtu = ETH_MIN_MTU;
1304 dev->max_mtu = lowerdev->max_mtu;
1305
1306 if (!tb[IFLA_ADDRESS])
1307 eth_hw_addr_random(dev);
1308
1309 if (!macvlan_port_exists(lowerdev)) {
1310 err = macvlan_port_create(lowerdev);
1311 if (err < 0)
1312 return err;
1313 create = true;
1314 }
1315 port = macvlan_port_get_rtnl(lowerdev);
1316
1317 /* Only 1 macvlan device can be created in passthru mode */
1318 if (port->passthru) {
1319 /* The macvlan port must be not created this time,
1320 * still goto destroy_macvlan_port for readability.
1321 */
1322 err = -EINVAL;
1323 goto destroy_macvlan_port;
1324 }
1325
1326 vlan->lowerdev = lowerdev;
1327 vlan->dev = dev;
1328 vlan->port = port;
1329 vlan->set_features = MACVLAN_FEATURES;
1330 vlan->nest_level = dev_get_nest_level(lowerdev) + 1;
1331
1332 vlan->mode = MACVLAN_MODE_VEPA;
1333 if (data && data[IFLA_MACVLAN_MODE])
1334 vlan->mode = nla_get_u32(data[IFLA_MACVLAN_MODE]);
1335
1336 if (data && data[IFLA_MACVLAN_FLAGS])
1337 vlan->flags = nla_get_u16(data[IFLA_MACVLAN_FLAGS]);
1338
1339 if (vlan->mode == MACVLAN_MODE_PASSTHRU) {
1340 if (port->count) {
1341 err = -EINVAL;
1342 goto destroy_macvlan_port;
1343 }
1344 port->passthru = true;
1345 eth_hw_addr_inherit(dev, lowerdev);
1346 }
1347
1348 if (data && data[IFLA_MACVLAN_MACADDR_MODE]) {
1349 if (vlan->mode != MACVLAN_MODE_SOURCE) {
1350 err = -EINVAL;
1351 goto destroy_macvlan_port;
1352 }
1353 macmode = nla_get_u32(data[IFLA_MACVLAN_MACADDR_MODE]);
1354 err = macvlan_changelink_sources(vlan, macmode, data);
1355 if (err)
1356 goto destroy_macvlan_port;
1357 }
1358
1359 err = register_netdevice(dev);
1360 if (err < 0)
1361 goto destroy_macvlan_port;
1362
1363 dev->priv_flags |= IFF_MACVLAN;
1364 err = netdev_upper_dev_link(lowerdev, dev);
1365 if (err)
1366 goto unregister_netdev;
1367
1368 list_add_tail_rcu(&vlan->list, &port->vlans);
1369 netif_stacked_transfer_operstate(lowerdev, dev);
1370 linkwatch_fire_event(dev);
1371
1372 return 0;
1373
1374unregister_netdev:
1375 unregister_netdevice(dev);
1376destroy_macvlan_port:
1377 if (create)
1378 macvlan_port_destroy(port->dev);
1379 return err;
1380}
1381EXPORT_SYMBOL_GPL(macvlan_common_newlink);
1382
1383static int macvlan_newlink(struct net *src_net, struct net_device *dev,
1384 struct nlattr *tb[], struct nlattr *data[])
1385{
1386 return macvlan_common_newlink(src_net, dev, tb, data);
1387}
1388
1389void macvlan_dellink(struct net_device *dev, struct list_head *head)
1390{
1391 struct macvlan_dev *vlan = netdev_priv(dev);
1392
1393 if (vlan->mode == MACVLAN_MODE_SOURCE)
1394 macvlan_flush_sources(vlan->port, vlan);
1395 list_del_rcu(&vlan->list);
1396 unregister_netdevice_queue(dev, head);
1397 netdev_upper_dev_unlink(vlan->lowerdev, dev);
1398}
1399EXPORT_SYMBOL_GPL(macvlan_dellink);
1400
1401static int macvlan_changelink(struct net_device *dev,
1402 struct nlattr *tb[], struct nlattr *data[])
1403{
1404 struct macvlan_dev *vlan = netdev_priv(dev);
1405 enum macvlan_mode mode;
1406 bool set_mode = false;
1407 enum macvlan_macaddr_mode macmode;
1408 int ret;
1409
1410 /* Validate mode, but don't set yet: setting flags may fail. */
1411 if (data && data[IFLA_MACVLAN_MODE]) {
1412 set_mode = true;
1413 mode = nla_get_u32(data[IFLA_MACVLAN_MODE]);
1414 /* Passthrough mode can't be set or cleared dynamically */
1415 if ((mode == MACVLAN_MODE_PASSTHRU) !=
1416 (vlan->mode == MACVLAN_MODE_PASSTHRU))
1417 return -EINVAL;
1418 if (vlan->mode == MACVLAN_MODE_SOURCE &&
1419 vlan->mode != mode)
1420 macvlan_flush_sources(vlan->port, vlan);
1421 }
1422
1423 if (data && data[IFLA_MACVLAN_FLAGS]) {
1424 __u16 flags = nla_get_u16(data[IFLA_MACVLAN_FLAGS]);
1425 bool promisc = (flags ^ vlan->flags) & MACVLAN_FLAG_NOPROMISC;
1426 if (vlan->port->passthru && promisc) {
1427 int err;
1428
1429 if (flags & MACVLAN_FLAG_NOPROMISC)
1430 err = dev_set_promiscuity(vlan->lowerdev, -1);
1431 else
1432 err = dev_set_promiscuity(vlan->lowerdev, 1);
1433 if (err < 0)
1434 return err;
1435 }
1436 vlan->flags = flags;
1437 }
1438 if (set_mode)
1439 vlan->mode = mode;
1440 if (data && data[IFLA_MACVLAN_MACADDR_MODE]) {
1441 if (vlan->mode != MACVLAN_MODE_SOURCE)
1442 return -EINVAL;
1443 macmode = nla_get_u32(data[IFLA_MACVLAN_MACADDR_MODE]);
1444 ret = macvlan_changelink_sources(vlan, macmode, data);
1445 if (ret)
1446 return ret;
1447 }
1448 return 0;
1449}
1450
1451static size_t macvlan_get_size_mac(const struct macvlan_dev *vlan)
1452{
1453 if (vlan->macaddr_count == 0)
1454 return 0;
1455 return nla_total_size(0) /* IFLA_MACVLAN_MACADDR_DATA */
1456 + vlan->macaddr_count * nla_total_size(sizeof(u8) * ETH_ALEN);
1457}
1458
1459static size_t macvlan_get_size(const struct net_device *dev)
1460{
1461 struct macvlan_dev *vlan = netdev_priv(dev);
1462
1463 return (0
1464 + nla_total_size(4) /* IFLA_MACVLAN_MODE */
1465 + nla_total_size(2) /* IFLA_MACVLAN_FLAGS */
1466 + nla_total_size(4) /* IFLA_MACVLAN_MACADDR_COUNT */
1467 + macvlan_get_size_mac(vlan) /* IFLA_MACVLAN_MACADDR */
1468 );
1469}
1470
1471static int macvlan_fill_info_macaddr(struct sk_buff *skb,
1472 const struct macvlan_dev *vlan,
1473 const int i)
1474{
1475 struct hlist_head *h = &vlan->port->vlan_source_hash[i];
1476 struct macvlan_source_entry *entry;
1477
1478 hlist_for_each_entry_rcu(entry, h, hlist) {
1479 if (entry->vlan != vlan)
1480 continue;
1481 if (nla_put(skb, IFLA_MACVLAN_MACADDR, ETH_ALEN, entry->addr))
1482 return 1;
1483 }
1484 return 0;
1485}
1486
1487static int macvlan_fill_info(struct sk_buff *skb,
1488 const struct net_device *dev)
1489{
1490 struct macvlan_dev *vlan = netdev_priv(dev);
1491 int i;
1492 struct nlattr *nest;
1493
1494 if (nla_put_u32(skb, IFLA_MACVLAN_MODE, vlan->mode))
1495 goto nla_put_failure;
1496 if (nla_put_u16(skb, IFLA_MACVLAN_FLAGS, vlan->flags))
1497 goto nla_put_failure;
1498 if (nla_put_u32(skb, IFLA_MACVLAN_MACADDR_COUNT, vlan->macaddr_count))
1499 goto nla_put_failure;
1500 if (vlan->macaddr_count > 0) {
1501 nest = nla_nest_start(skb, IFLA_MACVLAN_MACADDR_DATA);
1502 if (nest == NULL)
1503 goto nla_put_failure;
1504
1505 for (i = 0; i < MACVLAN_HASH_SIZE; i++) {
1506 if (macvlan_fill_info_macaddr(skb, vlan, i))
1507 goto nla_put_failure;
1508 }
1509 nla_nest_end(skb, nest);
1510 }
1511 return 0;
1512
1513nla_put_failure:
1514 return -EMSGSIZE;
1515}
1516
1517static const struct nla_policy macvlan_policy[IFLA_MACVLAN_MAX + 1] = {
1518 [IFLA_MACVLAN_MODE] = { .type = NLA_U32 },
1519 [IFLA_MACVLAN_FLAGS] = { .type = NLA_U16 },
1520 [IFLA_MACVLAN_MACADDR_MODE] = { .type = NLA_U32 },
1521 [IFLA_MACVLAN_MACADDR] = { .type = NLA_BINARY, .len = MAX_ADDR_LEN },
1522 [IFLA_MACVLAN_MACADDR_DATA] = { .type = NLA_NESTED },
1523 [IFLA_MACVLAN_MACADDR_COUNT] = { .type = NLA_U32 },
1524};
1525
1526int macvlan_link_register(struct rtnl_link_ops *ops)
1527{
1528 /* common fields */
1529 ops->priv_size = sizeof(struct macvlan_dev);
1530 ops->validate = macvlan_validate;
1531 ops->maxtype = IFLA_MACVLAN_MAX;
1532 ops->policy = macvlan_policy;
1533 ops->changelink = macvlan_changelink;
1534 ops->get_size = macvlan_get_size;
1535 ops->fill_info = macvlan_fill_info;
1536
1537 return rtnl_link_register(ops);
1538};
1539EXPORT_SYMBOL_GPL(macvlan_link_register);
1540
1541static struct net *macvlan_get_link_net(const struct net_device *dev)
1542{
1543 return dev_net(macvlan_dev_real_dev(dev));
1544}
1545
1546static struct rtnl_link_ops macvlan_link_ops = {
1547 .kind = "macvlan",
1548 .setup = macvlan_setup,
1549 .newlink = macvlan_newlink,
1550 .dellink = macvlan_dellink,
1551 .get_link_net = macvlan_get_link_net,
1552};
1553
1554static int macvlan_device_event(struct notifier_block *unused,
1555 unsigned long event, void *ptr)
1556{
1557 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
1558 struct macvlan_dev *vlan, *next;
1559 struct macvlan_port *port;
1560 LIST_HEAD(list_kill);
1561
1562 if (!macvlan_port_exists(dev))
1563 return NOTIFY_DONE;
1564
1565 port = macvlan_port_get_rtnl(dev);
1566
1567 switch (event) {
1568 case NETDEV_UP:
1569 case NETDEV_CHANGE:
1570 list_for_each_entry(vlan, &port->vlans, list)
1571 netif_stacked_transfer_operstate(vlan->lowerdev,
1572 vlan->dev);
1573 break;
1574 case NETDEV_FEAT_CHANGE:
1575 list_for_each_entry(vlan, &port->vlans, list) {
1576 vlan->dev->gso_max_size = dev->gso_max_size;
1577 vlan->dev->gso_max_segs = dev->gso_max_segs;
1578 netdev_update_features(vlan->dev);
1579 }
1580 break;
1581 case NETDEV_CHANGEMTU:
1582 list_for_each_entry(vlan, &port->vlans, list) {
1583 if (vlan->dev->mtu <= dev->mtu)
1584 continue;
1585 dev_set_mtu(vlan->dev, dev->mtu);
1586 }
1587 break;
1588 case NETDEV_CHANGEADDR:
1589 if (!port->passthru)
1590 return NOTIFY_DONE;
1591
1592 vlan = list_first_entry_or_null(&port->vlans,
1593 struct macvlan_dev,
1594 list);
1595
1596 if (macvlan_sync_address(vlan->dev, dev->dev_addr))
1597 return NOTIFY_BAD;
1598
1599 break;
1600 case NETDEV_UNREGISTER:
1601 /* twiddle thumbs on netns device moves */
1602 if (dev->reg_state != NETREG_UNREGISTERING)
1603 break;
1604
1605 list_for_each_entry_safe(vlan, next, &port->vlans, list)
1606 vlan->dev->rtnl_link_ops->dellink(vlan->dev, &list_kill);
1607 unregister_netdevice_many(&list_kill);
1608 break;
1609 case NETDEV_PRE_TYPE_CHANGE:
1610 /* Forbid underlaying device to change its type. */
1611 return NOTIFY_BAD;
1612
1613 case NETDEV_NOTIFY_PEERS:
1614 case NETDEV_BONDING_FAILOVER:
1615 case NETDEV_RESEND_IGMP:
1616 /* Propagate to all vlans */
1617 list_for_each_entry(vlan, &port->vlans, list)
1618 call_netdevice_notifiers(event, vlan->dev);
1619 }
1620 return NOTIFY_DONE;
1621}
1622
1623static struct notifier_block macvlan_notifier_block __read_mostly = {
1624 .notifier_call = macvlan_device_event,
1625};
1626
1627static int __init macvlan_init_module(void)
1628{
1629 int err;
1630
1631 register_netdevice_notifier(&macvlan_notifier_block);
1632
1633 err = macvlan_link_register(&macvlan_link_ops);
1634 if (err < 0)
1635 goto err1;
1636 return 0;
1637err1:
1638 unregister_netdevice_notifier(&macvlan_notifier_block);
1639 return err;
1640}
1641
1642static void __exit macvlan_cleanup_module(void)
1643{
1644 rtnl_link_unregister(&macvlan_link_ops);
1645 unregister_netdevice_notifier(&macvlan_notifier_block);
1646}
1647
1648module_init(macvlan_init_module);
1649module_exit(macvlan_cleanup_module);
1650
1651MODULE_LICENSE("GPL");
1652MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>");
1653MODULE_DESCRIPTION("Driver for MAC address based VLANs");
1654MODULE_ALIAS_RTNL_LINK("macvlan");